Win32:SysPatch

Win32:SysPatch is a system file infector

Description

Win32:SysPatch injects the user32.dll file with its own data and forces it to load malicious DLLs. These DLLs are intended to collect network traffic data and are able to control locally running processes from a remote machine and to download/send data through an open backdoor.

Detection/Removal

avast! with VPS file 081222-0 or later is able to detect this family of malware. For the removal instructions please visit our forums.